| Main Archive Page > Month Archives > clamav-users archives |
Re: [clamav-users] daily database broken again
From: Jesse Klint <jesse_at_nospam>Date: Mon Feb 28 2011 - 13:49:33 GMT
To: "ClamAV users ML" <clamav-users@lists.clamav.net>
Joel,
That update appears to work well on my end. Thanks!
"Joel Esler" <jesler@sourcefire.com> said:
> Jesse,
>
> Try now, Edwin just released a new version and he says that it works on his side.
>
> Thanks.
>
> Joel
>
> On Feb 28, 2011, at 8:08 AM, Jesse Klint wrote:
>
>> # freshclam
>> ClamAV update process started at Mon Feb 28 08:04:06 2011
>> WARNING: Your ClamAV installation is OUTDATED!
>> WARNING: Local version: 0.95.3 Recommended version: 0.97
>> DON'T PANIC! Read http://www.clamav.net/support/faq
>> main.cld is up to date (version: 53, sigs: 846214, f-level: 53, builder: sven)
>> daily.cvd is up to date (version: 12788, sigs: 60614, f-level: 60, builder:
>> edwin)
>> [root@smtp72.gate.iad1a ~]# service clamd restart
>> Stopping Clam AntiVirus Daemon: [ OK ]
>> Starting Clam AntiVirus Daemon: LibClamAV Warning:
>> ***********************************************************
>> LibClamAV Warning: *** This version of the ClamAV engine is outdated. ***
>> LibClamAV Warning: *** DON'T PANIC! Read http://www.clamav.net/support/faq ***
>> LibClamAV Warning: ***********************************************************
>> LibClamAV Error: Incorrect offset 'VI' in subsignature id 0 for signature type-1
>> LibClamAV Error: Problem parsing database at line 116
>> LibClamAV Error: Can't load
>> /var/ramdisk2/clamav-139fd9cf38cb04da63a3ff7b10518eec/daily.ldb: Malformed
>> database
>> LibClamAV Error: Can't load /var/lib/clamav/daily.cvd: Malformed database
>> ERROR: Malformed database
>> [FAILED]
>>
>> We are aware of the issues with running 0.95, and have a upgrade plan which
>> should have us current in a couple weeks. However, it would be nice if we could
>> keep it running until then :)
>>
>> "Joel Esler" <jesler@sourcefire.com> said:
>>
>>> As Edwin said the last time "this" happened. Unfortunately, we support the
>>> current version and one back with the ClamAV DB (Edwin correct me if I am wrong
>>> at
>>> any point), and with the rollout of 0.97, that means that 0.97 and 0.96 are the
>>> supported versions.
>>>
>>> New detection features are rolled out in newer versions of ClamAV in order to
>>> stay
>>> current in the tide of malware detection, we can't support every version.
>>>
>>> However, there are 4-5 commits to the db per day, (for instance there was a
>>> commit
>>> 1 minute ago), so try again.
>>>
>>> Joel
>>>
>>> On Feb 28, 2011, at 7:54 AM, Jesse Klint wrote:
>>>
>>>>
>>>> Yes,
>>>> ClamAV 0.95.3/12788/Mon Feb 28 06:55:40 2011
>>>>
>>>>
>>>> "Joel Esler" <jesler@sourcefire.com> said:
>>>>
>>>>> Jesse, are you also running 0.95?
>>>>>
>>>>>
>>>>> On Feb 28, 2011, at 7:46 AM, Jesse Klint wrote:
>>>>>
>>>>>> We are seeing a similar issue here. A forced freshclam pulls down the same
>>>>>> corrupted update. Patiently waiting for a fix....
>>>>>>
>>>>>> "Matus UHLAR - fantomas" <uhlar@fantomas.sk> said:
>>>>>>
>>>>>>> Hello,
>>>>>>>
>>>>>>> today I got this error again:
>>>>>>>
>>>>>>> LibClamAV Error: Incorrect offset 'VI' in subsignature id 0 for signature
>>>>>>> type-1
>>>>>>> LibClamAV Error: Problem parsing database at line 116
>>>>>>> LibClamAV Error: Can't load
>>>>>>> /tmp/clamav-61d6e84956044ced93fd4ddfd974c4ca/daily.ldb: Malformed database
>>>>>>>
>>>>>>> Yes, this server runs a bit old version (0.95.2) and I can't upgrade it (I
>>>>>>> plan moving to another server).
>>>>>>>
>>>>>>> Is this a problem of signature generation or is my clamav just too old to
>>>>>>> cope with new signatures?
>>>>>>>
>>>>>>> if I try to run freshclam manually, can I make it NOT to notify clamd,
>>>>>>> until
>>>>>>> I verify it's OK and can reload clamd?
>>>>>>>
>>>>>>> --
>>>>>>> Matus UHLAR - fantomas, uhlar_at_fantomas.sk ; http://www.fantomas.sk/
>>>>>>> Warning: I wish NOT to receive e-mail advertising to this address.
>>>>>>> Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
>>>>>>> Honk if you love peace and quiet.
>>>>>>> _______________________________________________
>>>>>>> Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
>>>>>>> http://www.clamav.net/support/ml
>>>>>>>
>>>>>>
>>>>>>
>>>>>> _______________________________________________
>>>>>> Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
>>>>>> http://www.clamav.net/support/ml
>>>>>
>>>>> --
>>>>> Joel Esler
>>>>> jesler () sourcefire.com
>>>>> http://blog.snort.org && http://blog.clamav.net
>>>>>
>>>>> _______________________________________________
>>>>> Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
>>>>> http://www.clamav.net/support/ml
>>>>>
>>>>
>>>>
>>>> _______________________________________________
>>>> Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
>>>> http://www.clamav.net/support/ml
>>>
>>> --
>>> Joel Esler
>>> jesler () sourcefire.com
>>> http://blog.snort.org && http://blog.clamav.net
>>>
>>> _______________________________________________
>>> Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
>>> http://www.clamav.net/support/ml
>>>
>>
>>
>> _______________________________________________
>> Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
>> http://www.clamav.net/support/ml
>
> --
> Joel Esler
> jesler () sourcefire.com
> http://blog.snort.org && http://blog.clamav.net
>
> _______________________________________________
> Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
> http://www.clamav.net/support/ml
>
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml